Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

243 results

CVE-2025-5548

vsvalinx/cve-2025-5548

Educational repository documenting the full exploitation lifecycle of a stack buffer overflow in FreeFloat FTP Server 1.0, including fuzzing, EIP…

binary-exploitationdebuggersexploitation+5

1 day ago

CVE-2023-52356-libtiff-analysis

yardenbenita/cve-2023-52356-libtiff-analysis

Root-cause analysis and patch validation of CVE-2023-52356 in libtiff using AddressSanitizer and GDB.

binary-analysisdebuggerseducation+2

0 days ago

CVE-2025-5548

alvarosr/cve-2025-5548

Documented technical analysis and controlled exploitation of CVE-2025-5548 in FreeFloat FTP Server, covering lab setup, static/dynamic binary…

binary-analysisdebuggerseducation+5

5 months ago

FuzzingBrain-Bench

fuzzingbrain/fuzzingbrain-bench

A benchmark for LLM-driven bug discovery: 77 challenges across 43 open-source projects (C/C++/Java).

ai-securitydynamic-analysis-sandboxingeducation+3

47 days ago

block-copyfail

atgreen/block-copyfail

BPF LSM blocker for CVE-2026-31431 (Copy Fail) — blocks authencesn AF_ALG binds at runtime without rebooting

defensive-toolsdynamic-analysis-sandboxingincident-response+1

74 months ago

CVE-2026-36981-Kernel-EoP-PoC

canomer/cve-2026-36981-kernel-eop-poc

Project Date : Feb 2026 / Memory corruption vulnerability within the kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel…

binary-exploitationdebuggersexploitation+4

24 months ago

CVE-2026-32945

johanneslks/cve-2026-32945

PJSIP DNS Compression Pointer Heap OOB Read (Remote DoS)

binary-analysisdynamic-analysis-sandboxingexploitation+2

5 months ago

copy-fail-mitigation-with-bpftrace

tang-yikai/copy-fail-mitigation-with-bpftrace

CVE-2026-31431, AKA Copy Fail, can be mitigated in one-line with bpftrace

defensive-toolsdynamic-analysis-sandboxingincident-response+1

4 months ago

heaplens

ypl6/heaplens

CMPT733 Cybersecurity Lab II Project: GDB plugin for heap exploits inspired by CVE-2021-3156

binary-analysisdebuggerseducation+2

24 years ago

test-fuzz

trailofbits/test-fuzz

Rust macros and Cargo subcommand to automate fuzzing with afl.rs, including corpus generation and harness implementation, integrated with Rust's…

code-analysisdynamic-analysis-sandboxingfuzzing+1

2085 days ago

not-slithering-anywhere

trailofbits/not-slithering-anywhere

The Python Version of our Not Go-ing Anywhere Vulnerable Application

dynamic-analysis-sandboxingeducationlabs-practice+3

112 years ago

Rogue-Framework

thisistfs/rogue-framework

Desktop workbench for AFL++ fuzzing, cross-architecture QEMU emulation, harness development, Ghidra headless analysis, custom mutators, and patch…

binary-analysisdebuggersdynamic-analysis-sandboxing+4

1412 days ago

React2Shell

phanhoangkhang/react2shell

Isolated Docker lab and static scanner for CVE-2025-55182, with vulnerable/patched Next.js builds and PoC validation of RSC Flight deserialization.

dynamic-analysis-sandboxingeducationexploitation+6

22 days ago

schrodingers-toctou

xoreaxeaxeax/schrodingers-toctou

Detect compiler-invented memory loads that turn secure C into TOCTOU vulnerabilities. Includes automated source audits, Unicorn-based binary…

binary-analysisdynamic-analysis-sandboxingeducation+3

1351 month ago

cve-2026-22747-sandbox

gsadagopan/cve-2026-22747-sandbox

Sandboxed reproduction environment for CVE-2026-22747, enabling controlled testing and analysis of the vulnerability and potential exploits in an…

dynamic-analysis-sandboxingexploitationvulnerability-analysis

20 days ago

sfuzz

seal9055/sfuzz

High performance fuzzing using riscv to x86 binary translations and modern fuzzing techniques

binary-analysisdynamic-analysis-sandboxingfuzzing+1

1552 years ago

VivisectION

atlas0fd00m/vivisection

Analysis Plugin and Tools for Vivisect

binary-analysisdebuggersdynamic-analysis-sandboxing+2

221 month ago

rewind

quarkslab/rewind

Snapshot-based coverage-guided windows kernel fuzzer

dynamic-analysis-sandboxingfuzzingreverse-engineering+1

3274 years ago

Previous12…14 Next